Tor

Tor is an encrypted anonymising network that makes it harder to intercept internet communications, or see where communications are coming from or going to.

In order to use the WikiLeaks public submission system as detailed above you can download the Tor Browser Bundle, which is a Firefox-like browser available for Windows, Mac OS X and GNU/Linux and pre-configured to connect using the anonymising system Tor.

Tails

If you are at high risk and you have the capacity to do so, you can also access the submission system through a secure operating system called Tails. Tails is an operating system launched from a USB stick or a DVD that aim to leaves no traces when the computer is shut down after use and automatically routes your internet traffic through Tor. Tails will require you to have either a USB stick or a DVD at least 4GB big and a laptop or desktop computer.

Tips

Our submission system works hard to preserve your anonymity, but we recommend you also take some of your own precautions. Please review these basic guidelines.

1. Contact us if you have specific problems

If you have a very large submission, or a submission with a complex format, or are a high-risk source, please contact us. In our experience it is always possible to find a custom solution for even the most seemingly difficult situations.

2. What computer to use

If the computer you are uploading from could subsequently be audited in an investigation, consider using a computer that is not easily tied to you. Technical users can also use Tails to help ensure you do not leave any records of your submission on the computer.

3. Do not talk about your submission to others

If you have any issues talk to WikiLeaks. We are the global experts in source protection – it is a complex field. Even those who mean well often do not have the experience or expertise to advise properly. This includes other media organisations.

After

1. Do not talk about your submission to others

If you have any issues talk to WikiLeaks. We are the global experts in source protection – it is a complex field. Even those who mean well often do not have the experience or expertise to advise properly. This includes other media organisations.

2. Act normal

If you are a high-risk source, avoid saying anything or doing anything after submitting which might promote suspicion. In particular, you should try to stick to your normal routine and behaviour.

3. Remove traces of your submission

If you are a high-risk source and the computer you prepared your submission on, or uploaded it from, could subsequently be audited in an investigation, we recommend that you format and dispose of the computer hard drive and any other storage media you used.

In particular, hard drives retain data after formatting which may be visible to a digital forensics team and flash media (USB sticks, memory cards and SSD drives) retain data even after a secure erasure. If you used flash media to store sensitive data, it is important to destroy the media.

If you do this and are a high-risk source you should make sure there are no traces of the clean-up, since such traces themselves may draw suspicion.

4. If you face legal action

If a legal action is brought against you as a result of your submission, there are organisations that may help you. The Courage Foundation is an international organisation dedicated to the protection of journalistic sources. You can find more details at https://www.couragefound.org.

Submit documents to WikiLeaks

WikiLeaks publishes documents of political or historical importance that are censored or otherwise suppressed. We specialise in strategic global publishing and large archives.

The following is the address of our secure site where you can anonymously upload your documents to WikiLeaks editors. You can only access this submissions system through Tor. (See our Tor tab for more information.) We also advise you to read our tips for sources before submitting.

RE: MITRE intro

Aaron,
Thanks for coming in....you have a lot of good things going on at HB Gary.
Here is a sampling of some of the projects ongoing relating to your own line of work. I am somewhat vague about titles, etc., because of the sensitivity of how this might be implemented. Certainly, we can arrange some way to formalize through an NDA so we can engage in more detailed discussion between our staff and yourselves.
DMZ Capability
Phylogenetic Models for Malware
Honeyclient (open source but with some other data/code in addition that can be licensed)
Root Kit Detection Technology
Next Generation Debugger for Malware
Manifold Learning and Dimension Reduction for Classification
Triage tool for incident response teams (sandbox-related)
And then, hopefully, you can apply one or more of these technologies to your federal business customers.
Let's discuss what you'd like to see out of all of these projects and go from there. I know that next week is pretty much out.....I did gather that we'd have some representation at Black Hat as well. I think we may have at least one speaker who might discuss one of these listed technologies. In the meantime, have a good trip out to LV.
Ray
Ray Dizon
Director, Technology Transfer Office
The MITRE Corporation
N680
7515 Colshire Drive
McLean, VA 22102
703-983-7132
rdizon@mitre.org
-----Original Message-----From: Aaron Barr [mailto:aaron@hbgary.com]
Sent: Wednesday, July 21, 2010 12:45 AM
To: Dizon, Ray
Subject: Re: MITRE intro
Yep. See you at 3
Sent from my iPad
On Jul 20, 2010, at 1:18 PM, "Dizon, Ray" <rdizon@mitre.org> wrote:
> It would have to be 3:00 tomorrow. Is that OK?
>
> I did see that BlackHat is on, got an email from someone else on it. I see that one of your folks is a speaker. Would have been interesting to have gone there.
>
> -----Original Message-----
> From: Aaron Barr [mailto:aaron@hbgary.com]
> Sent: Tuesday, July 20, 2010 12:36 PM
> To: Dizon, Ray
> Subject: Re: MITRE intro
>
> Shoot! I am very sorry Ray. I can do same time tomorrow if you can.
> Otherwise after blackhat.
>
> Aaron
>
> Sent from my iPad
>
> On Jul 20, 2010, at 9:52 AM, "Dizon, Ray" <rdizon@mitre.org> wrote:
>
>> Didn't see you last week......did you want to try again?
>>
>> Ray
>>
>> -----Original Message-----
>> From: Dizon, Ray
>> Sent: Friday, July 09, 2010 10:05 AM
>> To: 'Aaron Barr'
>> Subject: RE: MITRE intro
>>
>> Thursday the 15th is the better day, how about 2:00?
>>
>> Ray
>>
>> -----Original Message-----
>> From: Aaron Barr [mailto:aaron@hbgary.com]
>> Sent: Friday, July 09, 2010 10:03 AM
>> To: Dizon, Ray
>> Subject: Re: MITRE intro
>>
>> Sounds good. How about tuesday or thursday next week? I work mostly from home right now if I am not traveling, can we meet at the mitre building in Tysons?
>>
>> Aaron
>>
>> On Jul 8, 2010, at 12:42 PM, Dizon, Ray wrote:
>>
>>> David, thanks, see you soon.
>>>
>>> Aaron,
>>>
>>> Be happy to catch up with you some time to chat about social media, etc.
>>>
>>> I'm open to suggestions on dates/times/venues over the next couple of weeks. I'm generally flexible over locations as I drive around enough!
>>>
>>> Ray
>>>
>>>
>>> Ray Dizon
>>> Director, Technology Transfer Office
>>> The MITRE Corporation
>>> N680
>>> 7515 Colshire Drive
>>> McLean, VA 22102
>>> 703-983-7132
>>> rdizon@mitre.org
>>>
>>>
>>>
>>>
>>>
>>>
>>> -----Original Message-----
>>> From: David Etue [mailto:david@etue.net]
>>> Sent: Thursday, July 08, 2010 9:07 AM
>>> To: Aaron Barr; Dizon, Ray
>>> Subject: MITRE intro
>>>
>>> Ray - looking forward to meeting this afternoon. I wanted to provide a
>>> quick intro beforehand to Aaron Barr, who is the CEO of HB Gary
>>> Federal. Aaron and I have looked to do some work together around social
>>> media security, and during our discussions he mentioned there was some
>>> technology in MITRE around social media that may be available for tech
>>> transfer. I wanted to connect the two to discuss further.
>>>
>>> Aaron - Ray is the director of MITRE's Technology Transfer Office.
>>> Before joining MITRE, he was an investor in Fidelis while at the
>>> Maryland Venture Fund. Beyond being the right person to talk to about
>>> this particular opportunity, Ray is a great guy to know in the DC tech
>>> community.
>>>
>>> I'll let you two connect directly from here.
>>>
>>> David
>>
>> Aaron Barr
>> CEO
>> HBGary Federal Inc.
>>